Privacy & Cookie Policy

Pinnacle Engine is a trading name operated by Liam Cunliffe, a sole trader based in Weston-super-Mare, UK. Pinnacle Engine provides Business Growth Engineering services.

For information collected through this website and during direct enquiries, Liam Cunliffe normally decides why and how personal information is used and is therefore the data controller. Where Pinnacle Engine handles personal information solely on a client's documented instructions during paid work, Pinnacle Engine may instead act as a processor. That client relationship should be governed by a separate written agreement.

This policy covers visits to the Pinnacle Engine website, the current Netlify-hosted domain, the planned pinnacleengine.co.uk domain, contact and Growth Fit Call requests, downloads, data-rights requests, calculators, the Knowledge Guide, consent choices, and optional website measurement.

It does not govern a client's own handling of personal information or processing carried out under a separate client agreement.

Depending on how the website is used, Pinnacle Engine may collect:

• Identity and contact information, including name, email address, business name and, where supplied, telephone number and website address.
• Enquiry information, including the reason for contact, business context, goals, challenges, available evidence, preferred timing and optional budget context.
• Download information, including the selected resource and whether optional marketing consent was given.
• Data-rights information, including the type of request and the message supplied to verify and respond to it.
• Source and submission information, including page URL, page path, referrer, UTM campaign values, lead source, CTA label, submission time, consent time, consent source and the wording shown when consent was recorded.
• Technical information generated when the website is requested, which may include IP address, browser, device, operating system, request time, referring page and security or diagnostic logs held by the hosting provider.
• Consent and preference information stored in the browser, including optional analytics, marketing and preference choices.
• Calculator assumptions and calculated outputs that may be sent as analytics events only where Analytics is configured and accepted. Calculator inputs otherwise remain in the browser and are not submitted through a form.

The Knowledge Guide uses approved website content in the browser. It does not send the text of questions to an external AI service. Where Preferences is accepted, recent messages may be retained for the current browser session. If Analytics is accepted, the site records interaction metadata such as question length and question number, not the question text.

• Directly from you when you complete a form, choose a resource, send an email or contact Pinnacle Engine.
• Automatically from the website, browser, hosting infrastructure and security systems when pages and assets are requested.
• From optional analytics technology after the relevant consent category has been accepted.
• From campaign links through UTM parameters, referral information and the page on which an enquiry began.
• From a client or authorised business contact where this is necessary to discuss or deliver contracted work.

Pinnacle Engine uses personal information for the following purposes:

Where legitimate interests are used, Pinnacle Engine considers the business need, whether the use is reasonably expected, and the impact on the person concerned. Consent can be withdrawn at any time without affecting processing that was lawful before withdrawal.

Fields marked as required are needed to understand and respond to the relevant request. If they are not provided, the form cannot be sent. Optional fields can be left blank. No field is required for a visitor who only wants to browse the website or use calculators without submitting an enquiry.

Marketing consent is always optional and does not affect the handling of an enquiry, call request, download or data-rights request. Without it, contact is limited to responding to the enquiry, requested resource, booking or related service conversation, not ongoing marketing.

The website uses Netlify Forms for the forms listed below. Form data is sent to Netlify over HTTPS, checked using Netlify's form and anti-spam systems, stored in the site's Netlify form-submission area, and sent in a form notification to pinnacleengine@gmail.com. The notification is received through Google's Gmail service.

Honeypot fields are used to reduce automated spam. Please do not use a website form to send passwords, payment information, government identifiers, special-category information or other unnecessary sensitive personal information.

Download forms collect a name and email address, an optional business name, the selected resource, source data and the separate marketing choice. After a successful submission, the resource is unlocked and downloaded directly from the website. It is not delivered by an email-marketing platform.

Pinnacle Engine uses the submission to provide the requested resource, keep an operational record and understand which resources are useful. Selecting the separate optional checkbox records marketing consent; it does not automatically subscribe you to a newsletter or automated email sequence. No email marketing platform is currently in use.

Cookies are small text files placed on a device. Browser local storage and session storage perform similar functions and are covered here as storage technologies.

The website uses necessary local storage to remember the visitor's consent choice. Analytics and preference storage are optional. They are not enabled by default. The current code does not load Google Tag Manager or direct Google Analytics unless a valid tag ID is configured and Analytics is accepted.

Google Analytics is planned and only operates when genuinely configured and Analytics is accepted. Direct Google Analytics is bypassed whenever Google Tag Manager is configured. Meta Pixel, email marketing tracking and Calendly are not active. Booking uses the website's own Growth Fit Call request form. This policy must be reviewed before tracking or provider use changes.

The Google cookie names and durations shown are the provider's GA4 defaults for a configured GA4 tag. Browser restrictions and settings inside Google Tag Manager may shorten them. Production provider IDs, account retention settings and any tags published inside a GTM account require an account-level review and should be checked whenever the configuration changes.

On a first visit, the consent banner offers three equal routes: Accept All, Reject Non-Essential, and Manage Preferences. Optional categories are off unless the visitor enables them. Necessary storage cannot be switched off because it records the consent decision and supports core website operation.

Choices can be changed at any time through Cookie Settings in the footer. Withdrawing Analytics or Marketing consent stops future loading through the website and attempts to remove known first-party Google or Meta cookies. Browser controls may still be needed to remove storage already created by a third party.

Personal information may be shared only where needed with:

• Netlify, for website hosting, delivery, form processing, spam filtering, security and form-submission storage.
• Google, for Gmail form notifications and, after Analytics consent, Google Tag Manager and any approved analytics tags configured within it.
• Professional advisers, accountants, insurers, technology support or legal advisers where reasonably necessary and subject to appropriate duties of confidence.
• Public authorities, regulators, courts or law-enforcement bodies where disclosure is required or permitted by law.
• A purchaser or successor if the business or relevant assets are transferred, subject to appropriate confidentiality and data-protection safeguards.

Pinnacle Engine does not sell personal information. Lead management uses a Microsoft Excel spreadsheet, with no dedicated CRM platform. There is no email marketing platform, newsletter system or automated marketing-email provider in use.

Netlify and Google are international providers and may process or make information accessible outside the United Kingdom, including in the United States. Where UK personal information is transferred internationally, Pinnacle Engine will rely on the provider's applicable UK transfer mechanism, such as UK adequacy regulations, the UK International Data Transfer Agreement or UK Addendum to approved contractual clauses, together with additional safeguards where needed.

Provider contracts, transfer locations and safeguards should be reviewed when accounts or services change. A copy or summary of the applicable safeguards can be requested using the contact details below.

• Ordinary non-client enquiries, prospects and Growth Fit Call requests: normally up to 24 months after the last meaningful contact, unless an ongoing client relationship, dispute or legal obligation justifies longer retention.
• Client and transaction records: for the duration of the relationship and normally up to six years afterwards where needed for tax, accounting, contractual or legal records.
• Download records: normally up to 24 months, unless deleted earlier or retained as part of an active client or marketing record.
• Marketing records: until consent is withdrawn, followed by a minimal suppression record where needed to honour the opt-out.
• Data-rights requests: normally up to three years after closure to demonstrate how the request was handled.
• Consent choices in local storage: 12 months, unless changed or cleared earlier.
• Knowledge Guide session history: until the browser session ends, if Preferences is enabled.
• Analytics data: according to the retention settings in the relevant Google property; those account settings require manual verification.

These periods are working retention standards, not a reason to keep every record for the maximum period. Information may be deleted or anonymised sooner when it is no longer needed.

Pinnacle Engine uses HTTPS, access controls provided by its hosting and email services, form validation, honeypot anti-spam fields, security headers and restricted access to reduce risk. Service providers are selected and configured with security and data-protection needs in mind.

No internet transmission or storage system can be guaranteed completely secure. Visitors should not submit confidential credentials or sensitive personal information through ordinary website forms.

Depending on the circumstances, UK data-protection law may give you the right to:

• Be informed about how personal information is used.
• Ask for access to personal information held about you.
• Ask for inaccurate or incomplete information to be corrected.
• Ask for information to be erased in certain circumstances.
• Ask for processing to be restricted in certain circumstances.
• Object to processing based on legitimate interests.
• Receive or transfer certain information in a portable format.
• Withdraw consent at any time where consent is the lawful basis.
• Raise concerns about solely automated decisions with legal or similarly significant effects, where applicable.

You have an absolute right to object to the use of your personal information for direct marketing. Pinnacle Engine will stop direct marketing when you object or withdraw consent.

Email pinnacleengine@gmail.com to make a data-rights request. Pinnacle Engine may need enough information to verify identity and locate the relevant records before completing a request. Rights can be subject to lawful exemptions.

Pinnacle Engine does not currently use this website to make decisions about people based solely on automated processing where those decisions produce legal or similarly significant effects.

Calculators provide directional arithmetic based on values entered by the visitor. The Knowledge Guide retrieves approved website information. Neither tool approves, rejects, ranks or diagnoses an enquiry. Liam reviews contact and Growth Fit Call submissions personally.

You can raise a privacy or data-protection concern with Pinnacle Engine at pinnacleengine@gmail.com. The concern will be acknowledged, investigated and answered within the period required by applicable law.

Contacting Pinnacle Engine is not a prerequisite to complaining to the Information Commissioner's Office. Current contact and complaint information is available at ico.org.uk/make-a-complaint.

The website and services are intended for business users and are not directed at children. Pinnacle Engine does not knowingly ask children to provide personal information. If information about a child has been submitted, contact Pinnacle Engine so it can be reviewed and, where appropriate, deleted.

Links to third-party websites are provided for convenience. Those sites have their own privacy information and controls. Pinnacle Engine is not responsible for how an independent third party handles information after a visitor leaves this website.

This policy will be reviewed when forms, providers, analytics tags, storage technologies, retention practices or the business's use of personal information changes. Material changes will be reflected by a new last-updated date and, where appropriate, brought to affected people's attention before the new use begins.